Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: zTRMTSf/E4p/s0Vyw9sj6Ua1i6GW1P0rhDGrxqWki2Q=
Subject key identifier: DA:4D:CF:35:F7:25:92:A8:A8:A7:37:36:3A:40:7D:8C:24:F4:9E:7D
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 0196146B67A8CC2A04251BDB533876C2D279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 14DB
Signing time: Tue 08 Apr 2025 08:01:45 +0000
Manifest this update: Tue 08 Apr 2025 08:01:45 +0000
Manifest next update: Wed 09 Apr 2025 08:01:45 +0000
Files and hashes: 1: NVfSFRbL_XqrsozkQVUF_dxEis0.roa (hash: w0gIgbc0T4b6/R83m6BMmRlJsWXsqlZHaf0mYUqbthc=)
2: OWwS1MBQ-m8kT6EhUXf95uq4bag.roa (hash: yrGAuqdJlp0J0ZeoytNXiCBbQITRS5p4ksoJPjwm8MA=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: nfrJF48nm9WHFxQ3RI1/vpMfA4BFODSnqDskIn/HQ9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:67:a8:cc:2a:04:25:1b:db:53:38:76:c2:d2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Apr 8 08:01:45 2025 GMT
Not After : Apr 9 08:01:45 2025 GMT
Subject: CN=da4dcf35f72592a8a8a737363a407d8c24f49e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:ec:74:3a:c3:32:09:f4:c5:83:ff:2a:84:
47:5a:10:5c:bd:1b:af:6f:3a:85:af:44:3f:13:17:
d3:c9:50:75:db:ea:32:ca:a0:df:30:0d:66:a7:22:
49:17:0f:a4:4c:06:2c:de:4c:1e:14:2d:c1:27:aa:
62:a3:23:0f:66:e4:e2:b0:49:b6:78:4e:66:cd:de:
66:47:9d:d8:3d:bd:69:ef:e7:fb:20:21:b3:1c:40:
b7:7a:02:54:2e:63:44:f0:df:0f:94:67:4f:6d:45:
6f:2d:73:74:2f:f3:9e:f6:2c:ab:67:b6:d8:17:1d:
4f:56:08:94:bb:6d:c3:ed:07:24:7e:95:bf:99:4c:
14:8d:70:7f:9d:61:10:b6:1d:fa:5e:91:0e:74:cf:
d7:90:03:c2:68:ad:e5:34:d5:fc:26:c7:8f:e3:e9:
6a:7b:e6:76:57:28:7b:59:e7:ce:89:0f:11:46:41:
a6:f5:79:d5:61:28:bf:f3:bb:26:ea:5a:78:d9:86:
c4:f7:af:f8:53:f0:4c:b2:46:7a:0a:1b:a4:bb:7e:
d4:40:f1:9a:a1:57:3a:2a:8e:3a:fa:ac:e2:5d:bd:
ee:14:0e:b3:79:f4:0d:47:d6:3f:c8:a8:8b:2d:68:
2f:07:f5:e5:46:61:74:61:45:17:a6:8b:2e:63:0e:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:CF:35:F7:25:92:A8:A8:A7:37:36:3A:40:7D:8C:24:F4:9E:7D
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:4e:7d:6b:e7:6a:f6:25:1d:2d:09:bf:db:f5:3a:d7:a6:
7b:f2:8e:a3:67:6c:e4:11:d1:7e:43:13:4d:59:49:d2:59:b3:
f0:74:51:96:22:8a:8b:6b:73:7d:cb:bb:c8:b1:1f:58:2a:fc:
d1:13:a0:6d:0e:46:c3:55:e8:8a:ce:b4:31:51:be:b0:8c:13:
fe:8e:bd:84:6a:88:20:ee:d0:ec:bf:22:a7:6e:8e:43:9a:27:
54:2f:a2:1f:78:2b:79:09:28:c6:54:3c:31:83:2c:f3:50:a9:
73:70:e3:d3:69:75:e4:b8:6e:13:b1:a2:84:b1:fc:30:c7:7f:
22:4e:2e:5a:be:64:c0:94:89:48:25:b7:18:06:fd:39:96:b9:
fa:3b:1c:26:59:e9:77:25:20:ec:57:8d:61:a4:6d:88:74:67:
32:64:71:0f:54:62:5f:74:b1:9c:cc:00:af:4d:6d:58:7d:d9:
8c:65:b0:59:10:cd:24:6c:83:8d:08:e7:c4:1e:51:d3:84:89:
4e:eb:c5:04:a1:06:c7:80:f2:b9:57:60:44:1d:7f:3d:96:ec:
7c:1e:64:c5:61:8a:7c:28:30:9a:3e:0d:9a:9b:fd:60:eb:70:
7e:20:a0:9a:61:c7:46:68:90:d3:25:50:14:11:f0:5e:cb:8b:
20:98:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:48 2025 by rpki-client